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Amendments to the Claims: 

The following listing of claims replaces all prior versions, and listings, of claims in the 
application: 

I . (Currently Amended) A method of protecting security of a network server from unauthorized 
content contained in a message received by said server from a user, comprising: 

intercepting said message before any content of said message is processed by said server; 

examining said message to detennine if it contains one or more unauthorized elementsta 
the examining comt^risine: 

receiving iden tification of an execution program set to be used to process said 

message recejvedi 

retrieving identification of all mess age tvnes associated with said execution 
program set: 

examining said message received bv said server in relation tQ_said message types 
associated witli said execution program set: and 

determining if said message received bv said server contains an unauthorized 
element in relation to_the corresponding message tvpe for said message received; 
if it is determined that said message contains an unauthorized element preventing said 
message received from being processed by said server; 

if it is determined that said message does not contain an unauthorized element allowing 
said message received to be processed by said server. 
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2. (Original) The method of claim 1 wherein, if it is deterroined that said message received 
contains an unauthorized element, preventing said message received from being processed by 
said server, and causing an error notification to be sent to said user. 

3. (Cancelled). 

4. (Currently Amended) The method of claim ^ I wherein, if it is determined that said message 
received contains an unauthorized element, causing an error notification to be sent to said user. 

5. (Currently Amended) A method of protecting securiQr of an Internet network server from 
unauthorized content contained in a message received over the Internet by said server from a 
user, comprising: 

intercepting said message before any content of said message is processed by said server; 
examining said message to determine if it contains one or more unauthorized elementsi^ 
the examining comprising: 

receiving identification of an execution page to be used to process said message 
received; 

retrieving identification of all message tvpcs associated with said execution naae; 

examining said message received by said server in relation to said message typ es 
associated with said execution page: and 

determining if said message received by said server_c_Qntains_an unauthorized 
element in relation to a corresponding message type for said message received: 
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if it is detcnnined that said message contains an unauthorized element, preventing said 
message received firom being processed by said server; 

if it is determined that said message received does not contain an unauthorized element, 
allowing said message received to be processed by said server. 

6. (Original) The method of clwm 5 wherein, if it is determined that said message received 
contains an unauthorized element preventing said message received from being processed by said 
server, causing an error notification to be sent to said user. 

7. (Cancelled). 

8. (Currently Amended) The method of claim 7 5 wherein, if it is determined that said message 
received contains an unauthorized element, causing an error notification to be sent to said user. 

9. (Original) The method of claim 8 wherein, if it is determined that said message received docs 
not contain an unauthorized element, allowing said message received to be processed by said 
server. 

10. (Currently Amended) The method of claims U SL 5> ^ wherein said message comprises a 
name- value pair. 
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1 1 . (Original) The method of claim 10 wherein said element comprises one or more of the 
following items: an mstruction , a command, a character, a parameter, a token, or a string of any 
of said previous items. 

12. (Original) The method of claims 1 1 wherein said element is interpretable as an mstruction or 
command by said server, 

1 3. (Currently Amended) Security control apparatus for controlling the security of a network 
server from unauthorized content contained in a message received from a user of said server 
comprising: 

means for intercepting said message received before any content of said message is 
processed by said server; 

means for examining said message received to determine if it contains one or mote 
unauthorized elements -,, the means for examining further co mprising: 

means for receiving identifi cation from said user of an execution page retrievable 
bv said server to be used to process said message received: 

means for retrieving identification of message types assoc iated with said 
execution page from facilities associated with said server: 

means for examining said message received bv said server in re lation to said 
piessage types associated with said_execution page: and 

means for determining if said message received bv said server contains an 
unauthorized element in relation to a corresponding message type fo r said messa&e 
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received: 

means for preventing said message received from being processed by said server if it is 
determined that said message received contains an unauthorized element; 

means for allowing said message received to be processed by said server if it is 
determined that said message received does not contain an unauthorized element. 

14. (Currently Amended) The apparatus of claim 44 13 wherein said network server comprises 
an Internet network server and said message is received over the Internet by said server ftom a 
user. 

1 5. (Original.) The apparatus of claim 1 3 or 14 further comprising means for returning an error 
message to said user. 

16. (Cancelled). 

17. (Cancelled). 

1 8. (Currently Amended) The apparatus of claim -14 13 wherein said message comprises a name- 
value pair and said element is contained by said name-value pair. 

19. (Original) The apparatus of claim 18 wherein said element comprises one or more of the 
following items: an instruction , a command, a character, a parameter, a token, or a string of any 
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of said previous items. 

20. (Original) The apparatus of claim 19 wherein said element is interpretable as an instruction or 
command by said server. 
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